CVE-2003-0577: MPG123

High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days.

mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, which creates a negative frame size.

Affected products

• MPG123 MPG123: version 0.59r only; version pre0.59s only

Published 2003-08-18. Last modified 2026-06-16.